[KLUG Members] Re: Sendmail, Majordomo, and Redhat 8

Bryan J. Smith members@kalamazoolinux.org
31 Dec 2002 04:22:53 -0500


--=-yHly2z5sIfAjCGPGoj2v
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Mon, 2002-12-30 at 22:05, Robert G. Brown wrote:
> OK, so what yuo're doing is replacing the slackware system with a redhat=20
> system, so you know what's going on and feel more confident about maintai=
ning=20
> it? I think some background is in order.

Agreed.  Don't change what works.

I'm a RedHat bigot, largely because I have been a LAN file server
administrator for much of my career.  But I will _never_ change out a
working Slackware distro, just keep it "up-to-date".  Slackers rule
their systems, and it is the best distro for maximum customization
(which is important when serving on the Internet).  I know the
command-line enough to figure out any changes.

I have the same attitude on NetWare.  If it's in place, and it works,
don't change it.  Even buy more licenses if needbe, to a point.  Only
when you start running into technical issues then should you replace
it.  Unfortunately much Windows client software is designed to force
these changes.  But many stupid sysadmins don't know how to "segment
off" those few pieces when needbe.

I saw Lockheed-Martin take 3 years to convert from NetWare to NT (back
in the pre-ActiveDirectory days!) only to see reliability get far worse
and capabilities decrease (when their existing NetWare NDS was working
fine).  And they still don't have 2000/AD full integrated yet either --
and it's now _6_ years later!

I think FIT has the best approach:  OpenLDAP your enterprise backbone,
setup all accounts there, "segment off" the servers that require AD and
have them run a service to "sync in" new accounts and "sync back"
account changes.

> I don't understand. For years, Red Hat has installed sendmail so that it
> is "broken", that is, it doesn't work as an Internet mail server. Why?=20
> Because it can pose a HUGE security risk.
> If you set up sendmail but didn't have to change anything, it was a long
> time ago (a version over 3 years old), or it wasn't Red Hat (other=20
> distributions are free to provide therir own default configurations of
> sendmail).=20

RedHat actually patches and customizes Sendmail pretty well for the
Internet.  But I'd still seriously look at Postfix as a replacement for
the Internet if you want Sendmail-like operation.  I believe RedHat is
even including it now, but Sendmail is still the default.

As far as MLM (mail list managers), Mailman seems to be the Bomb now.

--=20
Bryan J. Smith, E.I. (BSECE)       Contact Info:  http://thebs.org
[ http://thebs.org/files/resume/BryanJonSmith_certifications.pdf ]
------------------------------------------------------------------
* A lecture on software piracy from Bill Gates is like a lecture *
* on adultry from the owner of a brothel of other people's wives *


--=-yHly2z5sIfAjCGPGoj2v
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQA+EWHsDjEszaVrzmQRAoSbAKDBXTTtjJXOaretbuVyySyLf4Yb+wCaA3J5
MlqLGZNQGnp5IIBnfdWFsNM=
=nv5X
-----END PGP SIGNATURE-----

--=-yHly2z5sIfAjCGPGoj2v--